SWAMPy

✎ CARVE FLESH

EDITING: context_modules_helperSpec.js

/*
 * Copyright (C) 2016 - present Instructure, Inc.
 *
 * This file is part of Canvas.
 *
 * Canvas is free software: you can redistribute it and/or modify it under
 * the terms of the GNU Affero General Public License as published by the Free
 * Software Foundation, version 3 of the License.
 *
 * Canvas is distributed in the hope that it will be useful, but WITHOUT ANY
 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
 * A PARTICULAR PURPOSE. See the GNU Affero General Public License for more
 * details.
 *
 * You should have received a copy of the GNU Affero General Public License along
 * with this program. If not, see <http://www.gnu.org/licenses/>.
 */

import Helper from '@canvas/context-modules/jquery/context_modules_helper'

QUnit.module('ContextModulesHelper', {
  setup() {
    sinon.stub(Helper, 'setWindowLocation')
  },

teardown() {
    Helper.setWindowLocation.restore()
  },
})

test('externalUrlLinkClick', () => {
  const event = {
    preventDefault: sinon.spy(),
  }
  const elt = {
    attr: sinon.stub().returns('http://example.com'),
  }
  Helper.externalUrlLinkClick(event, elt)
  ok(event.preventDefault.calledOnce, 'preventDefault not called')
  ok(elt.attr.calledWith('data-item-href'), 'elt.attr not called')
  ok(Helper.setWindowLocation.calledOnceWith('http://example.com'), 'window redirected')
})

test('externalUrlLinkClick sanitizeUrl', () => {
  const event = {
    preventDefault: sinon.spy(),
  }
  const elt = {
    // eslint-disable-next-line no-script-url
    attr: sinon.stub().returns('javascript:alert("hi")'),
  }
  Helper.externalUrlLinkClick(event, elt)
  ok(event.preventDefault.calledOnce, 'preventDefault not called')
  ok(Helper.setWindowLocation.calledOnceWith('about:blank'), 'redirect sanitized')
})

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📄 context_modules_helperSpec.js	JS	1.8 KB	2023-09-24 03:36	EDIT
📄 FileSelectBoxSpec.js	JS	3.5 KB	2023-09-24 03:39	EDIT